Implicit certificate key generation method based on SM2 digital signature

An implicit certificate and digital signature technology, applied in the field of information security, can solve the problems of receiver decryption failure, input error of identity information, and speed up the generation of user's public key, so as to reduce communication overhead, speed up verification, and avoid certificate errors. Binding attack effect

CN112367175AActive Publication Date: 2021-02-12XIDIAN UNIV
5 Cites 17 Cited by

Patent Information

Authority / Receiving Office
CN · China
Current Assignee / Owner
Publication Date
2021-02-12

Smart Images

  • Figure 1
    Figure 1
Patent Text Reader

Abstract

The invention discloses an SM2 digital signature-based implicit certificate key generation method, which mainly solves the problem that a user identity cannot correspond to a user public key in a public key cryptosystem in the prior art. According to the scheme, system parameters are set and initialized according to a standard cryptographic algorithm SM2; the certificate authority CA generates a key pair and sends a public key PCA to a user usr applying for a certificate; the user applying for the certificate generates a temporary key pair and sends an identity identifier IDA and a temporary public key X of the user to a certificate authority CA; the CA generates an implicit certificate cert and a signature s, and sends the cert and s to a user applying for the certificate; and the user generates a complete public key U and then verifies the complete public key U and the signature s to obtain a complete public and private key pair (u, U). The method conforms to the national cryptographic SM2 signature algorithm standard, is high in operation efficiency and short in bandwidth overhead, reduces the risk that a man-in-the-middle replaces a public key, and can be used for a resource-limited Internet of Things environment.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention belongs to the technical field of information security, and in particular relates to an implicit certificate key generation method, which can be used in an Internet of Things environment with limited resources, unifies the relationship between user identity and user public key, and realizes public key authentication. Background technique

[0002] In the public key cryptography system, a user has two keys, public key and private key. Among them, the public key is open to anyone. Anyone who obtains the public key can use the public key to encrypt the message. The encrypted ciphertext can then be sent to the recipient through an open channel. Only the recipient who has the private key corresponding to the public key can correctly decrypt the ciphertext and recover the plaintext information. Typical public key encryption systems include RSA system, ELGamal system, and Gramer-Shoup system with high security.

[0003] A key problem with this ...

Examples

Embodiment Construction

[0033] In order to make the object, technical solution and advantages of the present invention more clear, the present invention will be further described in detail below in conjunction with the examples. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

[0034] refer to figure 1 , the implementation steps of the present invention are as follows:

[0035] Step 1, system parameter initialization.

[0036] The system parameters of this example are set according to the domestic cryptographic algorithm SM2 standard recognized by the State Cryptography Administration, and the settings are as follows:

[0037] 1.1) Let F q is a finite field of order q, where q is an odd prime number or a power of 2, when q is an odd prime number p, p>2 is required 191 ; when q is a power of 2 m When , require m>192 and be a prime number;

[0038] 1.2) Select the elliptic curve equation E as ...